Configuring proxy server

Overview

Even though the NAT technology used in Kerio Control enables direct
access to the Internet from all local hosts, it contains a standard
non-transparent proxy server.

You can use it, for example, when Kerio Control is deployed within a network with many hosts where proxy server has been used. Thus, the Internet connection is kept if proxy server is used, and you don't have to re-configure all the host (or only some hosts require re-configuration).

The proxy server can be used for HTTP, HTTPS and FTP protocols. Proxy
server does not support the SOCKS protocol.

Configuring the proxy server

This option enables the HTTP proxy server in Kerio Control on the
port in the Port entry (3128
port is set by the default).

To enable a tunnelled connection on non-standard TCP
ports (for example, connecting to remote Kerio Control administration placed in the
Internet from your local network), select option Allow tunnelled
connections to all TCP ports.

Configuring browsers

To communicate through non-transparent proxy server, you
must configure web browsers on client hosts. You have several options for this
configuration:

Configure browsers manually: type the IP address or DNS name of the proxy server and port (3128 is
the default port for Kerio Control) in the proxy server settings in the
browser

In the Kerio Control administration in the Proxy Server section, switch the mode for automatic proxy configuration script to
Kerio Control non-transparent proxy server, and add the following address to
the browsers settings:

http://192.168.1.1:3128/pac/proxy.pac
where 192.168.1.1 is the IP address of the Kerio
Control host and number 3128 represents the port of the
proxy server (see above).

In the Kerio Control administration in the Proxy Server section, switch the mode for automatic proxy configuration script to Allow browsers to use configuration script
automatically via DHCP server in Kerio Control

All browsers must select Automatically detect
settings in the proxy server settings.

The automatic configuration of browsers may take several hours.
Browsers must ask for a new configuration.

Forwarding to parent proxy server

You can use a parent proxy server for non-transparent proxy traffic, update checks, Sophos updates downloads,
and for connecting to the online Kerio Control Web Filter databases.

In the administration interface, go to Proxy
Server.

Select Use parent proxy server.

Type the IP address or the DNS name of the parent proxy server to the
Server field.